. . . 2 Sy 1 ta 
j j isi Conseil de la radiodiffusion et des Ç 
de Radio-television and OI à ra | 
F R Se a nes Commission télécommunications canadiennes 


QAd 
R 
- A59 


aA 


3 1761 URS 5 


Sen 


Annual Report 


Privacy 
2011 / 2012 


a 3 Ë www.crtc.gc.ca 
Canada 


Digitized by the Internet Archive 
in 2023 with funding from 
University of Toronto 


https://archive.org/details/31/61117012385 


F2) Conseil de la radiodiffusion et des Canadian Radio-television ana 
télécommunications canadiennes Telecommunications Commission 


Ottawa, Canada 
KIA ON2 


The Honourable James Moore 

Minister of Canadian Heritage 
and Official Languages 

15 Eddy Street 

Gatineau, Quebec 

K1A OM5 


Dear Minister: 


In accordance with the provisions of Section 72 of the Privacy Act, the Canadian 
Radio-television and Telecommunications Commission hereby submits its annual 
report for the yeer ending March 31, 2012 for referral to the Standing Committee on 


Justice and Human Rights. 


Sincerely, 


Le Mtn a ‘6 AAC ; 


Oy , 
“ John Traversy ‘ty, 
Secretary General LL 


Canada 


7 7 _ 

s4 : } ei - i Are prs en" Y 5 aie be L Wes ot : Fe éterens at 4 | 
| L 

se voit ESRI) seamen ss ST Sp aes A 110 


= à 7 seit ed ut fer CUE TE Mol yo Pere hie 
: | 
ei rutrets Cut TA 


Access to Information & Privacy Coordinator 
CRTC 

1, Promenade du Portage 

Central Building, Les Terrasses de la Chaudière 
Hull, Quebec 

(819) 997 4274 


mailing address: 
Ottawa, Ontario 
K1A ON2 


or 


Toll free 1-877-249-2782 

TDD - Toll free 1-877-909-2782 

Tel: (819) 997-0313 

TDD - (819) 994-0423 

Internet Address: hittp://www.crtc.gc.ca 


Catalogue no. BC9-5/2-2012 


io) 


EL 
ns 
aes 
st 
ars 
ea | | 


' 
iret gt 
at, eee. 
“er: 
Ted 


Table of Contents 


FOCI CUCL cer huh co entr te Se rt A ee Ct her RE LR EAN LR OU NE AS 4 
GRC Mand aleranUdeNeSPUlIsIOl IGS eget a een etre da ee eee 4 
ODISCHVS Sen, eran tre creer en Nee ie Meek ere to eS avee ee 4 
Administration ............... Rr ne ne eee eee ne ee ee ee à 
Delegation Graeme cee AN ee MARNE RCE or D. 5 
RÉGUSS Sele CEIVE URSS PEU CRC nana svigt elec clones 7 
ECU CALGI el icestccalt lL Fl Ce scan eme dur ter 6 
LISA CIS COS ea ne sic des Tree 6 
FONCÉ S ADO OT EULL ES ee feat mea, ess eos ie lie 6 
(OM DIGI oan ee natn RE ne nse de ene ata arial atal? lnk Momentos 6 
PrivacyilmpactvAssessmontiew: we See nee dale See een ik LL: 6 
Disclosures Under Subsections 8(2)(e), (f), (g), and (m) of the Privacy Act.......... 7 
StatisticalReportwmomine eval WA Cte cis oo eee de rede 74 


Appendices: 
A. Delegation Order 
B. Statistical Report 


or) 


CE ast ep Qi 
—SSyyeee 


| =i wh eate = sap derriere must 
rs v oe » 
. jen 2 NA 
| | | ust sents 
. — > « ll 
7 T _ 


" | LL - eee 
= eds PTS IL 


Dh vomi rl N pa | | TpetEA acy! i 
to ti tes ot fh) (oi Gle Serious rat ifean 
Vo VOAN TS Be bey eee 


Introduction 


This report was prepared pursuant to section 72 of the Privacy Act (the Act) and will be 
tabled in Parliament in accordance with the Act. 


In its day-to-day operations, federal government departments and agencies collect 
personal information from almost all Canadians. The Privacy Act gives Canadian citizens 
and people present in Canada the right to have access to information about them that is 
held by the federal government. It also protects against unauthorized disclosure of that 
personal information. In addition, it strictly controls how the government will collect, use, 
store, disclose, and dispose of any personal information. 


CRTC Mandate and Responsibilities 


The Canadian Radio-television and Telecommunications Commission is an 
independent, quasi-judicial organization that regulates and supervises the Canadian 
broadcasting and telecommunications systems, according to the policy objectives 
established in the Broadcasting Act of 1991 and the Telecommunications Act of 1993. 


The CRTC exists under the authority of the Canadian Radio-television and 
Telecommunications Commission Act of 1985. Its mandate is governed by the 
Broadcasting Act and the Telecommunications Act. The Broadcasting Act seeks to 
ensure that Canadians have access to a wide variety of high-quality Canadian 
programming. The 7elecommunications Act seeks to ensure that Canadians have 
access to reliable, high-quality telephone and telecommunications services at affordable 
prices. 


The CRTC received an additional mandate under Canada’s anti-spam legislation, which 
addresses, among other things, the sending of commercial electronic messages (eg. 
spam), the unauthorized installation of computer programs (e.g., malware) and the 
unauthorized alteration of transmission data (e.g., network re-routing) without consent. 
The CRTC is preparing to investigate violations once the law comes into force. 


The CRTC works diligently to ensure the communications sector is regulated fairly, 
effectively and efficiently, and in a manner that fosters increased reliance on market 
forces. It endeavours to keep its regulatory policies current by taking into account 
emerging technologies and market developments and consumer interests. 


Objectives 


The CRTC seeks to balance the needs of Canadians with the interests of the 
communications industry. Through its regulatory function, the CRTC addresses various 
economic, social and cultural issues related to the communications industry, including: 


4 


e fostering a healthy and competitive communications system that will enable 
Canadians to participate in, and benefit from, the digital economy 


e ensuring that Canadians have access to a wide variety of Canadian-produced 
television and radio programming that reflects Canada’s values, as well as its 
linguistic, cultural, and regional diversity 


e ensuring that Canadians have access to reliable, affordable, and high-quality 
telecommunications services, and 


e protecting Canadians from unsolicited communications and contributing to a 
more secure online environment for consumers and businesses. 


Administration 


The Access to Information and Privacy (ATIP) Office is located within the Information 
Management section of the Information Management and Technologies Directorate. 
The ATIP Office currently has one full-time employee and three part-time employees. 
Their functions are shared between the fulfillment of the CRTC’s obligations under the 
Privacy Act and the Access to Information Act as well as the management of information 
policies at the CRTC. 


During the 2011-2012 reporting period, the ATIP office continued work on the 
development of a Privacy Management Framework (PMF). The objective of the PMF is 
to outline the way in which the CRTC develops policies and procedures to distribute 
privacy responsibilities, coordinate privacy work, manage privacy risks and ensure 
compliance with both the Access to Information and Privacy Acts. 


Delegation Order 


Decision-making responsibility for the application of the various provisions of the Privacy 
Act has been formally established and is outlined in the Designation Order approved by 
the Chairman of the CRTC on July 27, 2010. A copy of the designation order is in 
Appendix A of this Report. 


Requests received under the Privacy Act 


During the reporting period from April 1, 2011 to March 31, 2012, the CRTC 
received three requests under the Privacy Act. These requests were processed 
during the reporting period as well as one request brought forward from the previous 
reporting period. 


LA 


Education and training 


During 2011-2012, two training sessions were offered to 23 employees, providing 
them with an overview of the Access fo Information Act and the Privacy Act, and a 
better understanding of their obligations and the processes within the CRTC. 


An overview of legislated Privacy requirements and secure information handling 
practices was provided at a Commission orientation session for 40 employees. 
Upon request, informal information sessions were also given to Commission staff on 


the ATIP process and roles & responsibilities, specific Privacy considerations, as 
well as various Information Management (IM) considerations. 


Use and disclosure 


Through training and information sessions, CRTC employees are made aware of 

their responsibilities for the proper management of personal information holdings. 

Responsible sectors are also required to consult with the ATIP Coordinator before 
collecting any personal information. 


The ATIP Coordinator must be notified where personal information in a personal 
information bank is used or disclosed for a use consistent with the purpose for which 
the information was obtained or compiled, but was not identified in the statement of 
consistent uses published in [nfo Source. 


Policies and Procedures 


There were no new privacy policies or procedures put in place in 2011-2012. 


Complaints 


There were no privacy complaints in 2011-12. 


Privacy Impact Assessment 


No Privacy Impact Assessments (PIA) were completed during this reporting period. 


Disclosures Under Subsections 8(2)(e), (f), (g), and 
(m) of the Privacy Act 


There were no disclosures pursuant to subsections 8(2) (e), (A, (g) or (m) for the 
2011-2012 period. 


Statistical Report of the Privacy Act 


The report can be found at Appendix B. 


Appendix A: Delegation Order 


Privacy Act Delegation Order 


I, the undersigned, Chairman of the Canadian Radio-Television and 
Telecommunications Commission (CRTC), pursuant to section 73 of the Privacy 
Act*, hereby designate the person or persons holding the position or positions set 
out in the schedule hereto to exercise and perform the powers, duties and functions 
of the Chairman, as the head of the government institution, under the sections of the 
Act set out in the attached schedule for each position. 


This Delegation Order supersedes ail previous Delegation Orders with respect to the 


CRTC, or any portion thereof. 


Konrad von Finckenstein, Q.C. 
Chairman of the CRTC 
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Appendix B: Statistical Report 


ad Government Gouvernement 
of Canada du Canada 


Statistical Report on the Privacy Act 
Name of institution: Canadian Radio Television and Telecommunications Commi: 


Reporting period: 01/04/2011 to 31/03/2012 


PART 1 - Requests under the Privacy Act 


Received during reporting period 


Outstanding from previous reporting period | 


Closed during reporting period ne 


Carried over to next reporting period 


PART 2 — Requests closed during the reporting period 


2.1 Disposition and completion time 


Completion Time 
Disposition of 


rae Para ar are] D 
requests days days days days days days 365 days 

i RC SE ER STS COTES 
DEEE on pr Po CON HE 
Al exemples 60 anata Cn U Ome | SLOT 
Aexeugeg | 0 o | © | o | o | o | o | 0 | 
Requestabandoned_ | o | 0 | 0 | o | o | o | o | o_| 


Number of 
Section requests 


TBS/SCT 350-63 (Rev. 2011/03) 1 Canada 


2.3 Exclusions 


Number of 
requests 


[Disposition | 
All disclosed eet | ee 


Disclosed in part 


2.5 Complexity 


2.5.1 Relevant pages processed and disclosed 


~ Number of pages 
disclosed 


All excluded 


Request abandoned 


pages processed | pages processed | pages processed | pages processed | pages processed 
. 4 Number of | Pages Pages himbegoy Pages 
Disposition Requests | disclosed | Requests | disclosed § Requests | disclosed À Requests | disclosed | Requests | disclosed 
Airdiscosed [1 | 5 [0 BON UN MONET | 
360 PC PANNE | 
All exempted | 0 | o Jf o | 0 | 0 HO | cae 
Allexcuded | 0 | 0 | o | o | o | 

Abandoned | o | o | o | o | o | 


2.5.3 Other complexities 


2.6 Deemed refusals 


2.6.1 Reasons for not meeting statutory deadline 


| Principal Reason 
External Internal 
consultation | consultation 


Number of requests closed past 
the statutory deadline 


Number of days past deadline where no deadline where an 
deadline extension was taken | extension was taken 


Paragraph 8(2)(e) Paragraph 8(2}(m) 


PART 4 — Requests for correction of personal information and notations 


Requests er conesionrecewed | © 
Requests for comection accepted | © 


PART 5 — Extensions 


5.1 Reasons for extensions and disposition of requests 


15(a)(i) _ 15(a)(ii) 
Disposition of requests where an | Interference with __Consultation 
extension was taken __ operations Section 70 


Allexempted 
All excluded | 


No records exist 


Request abandoned ‘ 


45(a)(i) 15(ayiit) 15(b) 
Interference with Consultation Translation 


operations Section70 | Other | 


PART 6 — Consultations received from other institutions and organizations | 
6.1 Consultations received from other government institutions and organizations 
| Other 


government Number of Other Number of 
ASSUREURS institutions pages to review | organizations ges to review 


6.2 Recommendations and completion time for consultations received from other government 
institutions 


_ Number of days required to complete consultation requests 


61 to 121 to | 181to than 
1 to 15 |16 to 30|31t0 60| 120 180 365 365 


_ days days days days days Total 
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6.3 Recommendations and completion time for consultations received from other organizations 


Recommendation 
Disclose entirely 


Number of days required to complete consultation requests 


61to | 121 to | 181to | than 
1to 15 |16 to 30/31 to60) 120 180 365 365 
Recommendation days days days days days days days Total 


Biscoseentrey [0 | oP o | 0 | o | (Oo yO 
D or 


PART 7 — Completion time of consultations on Cabinet confidences 


re a ae ro put nine 
Number of days received | received past deadline 

ECC RS RE DO EU 
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181 to 365 


More than 365 Serr ee EN 
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PART 8 — Resources related to the Privacy Act 


8.1 Costs 


$9,967 


8.2 Human Resources 
Dedicated full-time Dedicated part-time 


Fuimeempioyees [00 | 10 | 1w 
Farine sd casual employes | 00 | où | 00 
Regonaisiaf | 00 | où | ww 
[Consutants and agency personnel_| 000 | __ow | ow 
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